Security & trust

How we protect your business and your data

What protects your business and your data today. Compliance we have not earned yet is marked Soon.

Encrypted in transit and at rest
All traffic runs over TLS and your data is encrypted where it is stored. Files you make are shared only through links that expire.
Your connected accounts stay on our servers
The logins you connect and the keys we use are held server-side, never in source code and never sent to your browser.
You see what spends before it does
Anything that uses credits is marked before you click, and what it cost is recorded against it.
Every AI action is on the record
Each one is written down with who took it and when. Work above the level you set waits for your approval, and where an action can be undone, undoing it is a button.
Charged once
Submitting the same request twice, by a retry or a double-click, still uses your credits once.
Least-privilege access
Our team's access is role-based and minimal, with multi-factor sign-in on production, cloud and source code.
Monitored, and scanned on every change
Failures alert us quickly, and every change is scanned for vulnerable dependencies before it ships.
SOC 2 Type 1
Soon
Not yet certified. We will put the date here when it is real, not before.

See whether AI assistants can find your business.

Free, about 30 seconds, no signup or card. You get the score, the evidence and the first fix to make.